Struct Guard 

pub struct Guard { /* private fields */ }

A chosen (IdentityProvider, Authorizer) pair — the policy a surface enforces. One Guard serves every request on a surface; identity is derived per request, so a single guard handles many concurrent callers.

allow_anonymous decides what happens when no provider recognizes a request’s credentials: true admits it as Principal::anonymous (auth is optional), false rejects it (auth is required). Authorization still runs on the resulting principal, so “optional authn + strict authz” is expressible — anonymous simply holds no roles.

Implementations

impl Guard

pub fn new( identity: Arc<dyn IdentityProvider>, authorizer: Arc<dyn Authorizer>, ) -> Self

Builds a guard that requires authentication (allow_anonymous = false).

pub fn allow_anonymous(self, allow: bool) -> Self

Sets whether unrecognized/absent credentials fall back to anonymous (builder style).

pub fn disabled() -> Self

The wide-open policy: anonymous is accepted and everything is allowed. Behaviourally identical to running with no auth.

pub fn is_disabled(&self) -> bool

Whether this guard enforces nothing (anonymous provider + allow-all), so callers can skip the identity plumbing on hot paths if they wish.

pub fn authenticate( &self, credentials: &Credentials, ) -> Result<Principal, AuthError>

Authenticates a request’s credentials into a principal.

Errors

Propagates a provider’s AuthError, or returns AuthError::Unauthenticated when no provider accepts and anonymous access is not allowed.

pub async fn authorize( &self, principal: &Principal, access: &Access, ) -> Result<Option<Arc<dyn ViewFilter>>, AuthError>

Authorizes access for principal, returning any view restriction.

Async because Authorizer may consult an external policy oracle; local authorizers resolve without awaiting.

Errors

Returns AuthError::Forbidden when the authorizer denies the access.

Trait Implementations

impl Clone for Guard

fn clone(&self) -> Guard

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.